CoreCVE
Back

MEDIUM

Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

Published Aug 13, 2025

Description

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.

This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

Affected products

Remediation

Vendor solution

Version Minor Version Suggested Solution

Checkov by Prisma Cloud 3.2

3.2.0 through 3.2.414 Upgrade to 3.2.415 or later.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner palo_alto
Published Aug 13, 2025
Updated Aug 13, 2025
Reserved Mar 10, 2025
Link CVE-2025-2180
CISA Vulnrichment
Updated Aug 13, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-2180
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-2180
ENISA EUVD
Assigner palo_alto
Published Aug 13, 2025
Updated Aug 13, 2025
Exploited since n/a
Link EUVD-2025-24606
EUVD-2025-24606